research-competitors-category-pass
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is built to consume and process data from various untrusted external sources, which could contain malicious instructions designed to influence the agent.
- Ingestion points:
SKILL.md(Sections 1-5) directs the agent to gather information from public platforms such as Reddit, Hacker News, LinkedIn, Quora, YouTube, TikTok, and search results. - Boundary markers: There are no delimiters or instructions provided to help the agent ignore potentially malicious content within the fetched data.
- Capability inventory: The agent uses search and browsing tools to perform its tasks.
- Sanitization: The skill does not describe any methods for cleaning or validating the retrieved external data before processing.
- [EXTERNAL_DOWNLOADS]: The skill performs automated web searches and page fetches from well-known public platforms.
- Evidence: The instructions in
SKILL.mdspecify conducting searches and fetches across platforms including Google, Reddit, Hacker News, LinkedIn, Quora, YouTube, TikTok, and Meta Ad Library to compile market intelligence.
Audit Metadata